On platforms that will automatically execute
initialization functions of a shared library (this includes
at least Windows and ELF-based Unixen), LOAD can be used to make the server execute
arbitrary code. Thanks to NGS Software for reporting
this.

Check that creator of an aggregate function has the
right to execute the specified transition functions

This oversight made it possible to bypass denial of
EXECUTE permission on a function.

The result of the join was mistakenly supposed to be
sorted the same as the left input. This could not only
deliver mis-sorted output to the user, but in case of
nested merge joins could give outright wrong answers.